$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/42C6F6041E6F11EF898C1E38C4F9AE02.roa File: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (raw, json) Hash identifier: 2stoKPGtEtlZ08VVZOxws9V/de7YVTyf8l5svzyZI90= Subject key identifier: 7C:EB:A2:34:37:AF:D3:2A:48:A7:9E:29:B9:F9:E7:E0:51:AA:A9:27 Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Certificate serial: 0199 Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/42C6F6041E6F11EF898C1E38C4F9AE02.roa Signing time: Thu 09 Jul 2026 06:33:08 +0000 ROA not before: Thu 09 Jul 2026 06:33:08 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 152886 IP address blocks: 2001:df3:dbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Validity Not Before: Jul 9 06:33:08 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4f40a4-e497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:bc:37:ac:d2:f0:ab:ea:93:cb:9a:ae:2a: 26:98:94:ed:5c:74:a5:e4:56:db:95:a4:68:49:81: 69:c2:ba:a2:d8:09:5c:63:d6:45:1d:6c:d1:5f:dd: 4c:a7:2b:16:6f:11:82:bd:17:b7:3c:44:be:17:0c: 77:45:b1:28:26:4d:26:7f:c7:64:e3:57:0b:ac:95: dc:59:52:15:d4:13:11:dc:ec:ed:7e:50:02:9b:c9: 19:e5:71:f3:c6:8b:77:3a:12:24:e4:1f:ce:e0:01: ce:ab:86:6a:d7:dd:f5:be:30:8a:36:f6:84:cb:af: 99:82:bb:96:4a:9c:3f:55:13:6b:4a:40:0c:a2:1e: c7:95:ca:91:52:82:95:23:b3:00:62:a5:73:8f:cd: d1:5b:44:2c:08:da:99:5e:bc:a9:b0:4f:54:25:df: d1:d7:64:ad:fd:ee:3a:00:d3:aa:e4:76:10:10:be: a7:30:f0:cc:39:4b:61:be:36:f7:b8:a0:6e:32:87: fb:0a:b0:1a:f7:5d:50:6e:a1:43:fd:6a:08:2a:b4: d8:96:51:e0:bf:11:29:b1:ad:b4:ba:26:b6:63:22: e9:d0:87:50:d3:24:08:d6:f3:96:66:04:fb:91:77: 21:55:3d:08:48:b7:b3:6b:e5:ea:65:25:bb:3c:c4: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EB:A2:34:37:AF:D3:2A:48:A7:9E:29:B9:F9:E7:E0:51:AA:A9:27 X509v3 Authority Key Identifier: keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/42C6F6041E6F11EF898C1E38C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:dbc0::/48 Signature Algorithm: sha256WithRSAEncryption 44:13:fe:7f:01:48:51:e8:a6:58:80:f1:fb:ee:69:b7:7f:b4: 03:0a:44:37:4b:52:af:0d:30:7a:22:26:d6:db:42:b6:81:76: 89:37:9d:ba:27:5e:9d:55:ee:6e:56:69:46:83:ef:5c:d3:97: 1b:74:3c:7e:3b:08:bc:e0:df:e6:c5:af:e5:c6:32:a2:e0:60: a0:31:57:7e:4c:a7:45:62:ea:95:0f:9b:f0:9a:7e:38:96:d2: 35:36:4b:ee:ea:52:75:11:01:28:75:c5:6b:ed:ee:e3:7a:50: 8d:af:27:8d:3d:98:1e:1a:02:b4:82:9c:06:3c:d9:4a:f1:cd: 95:4e:19:de:aa:13:07:3f:98:96:5a:70:68:d2:dd:cd:31:72: 27:05:a7:81:cb:4f:af:10:f4:77:3b:bb:24:0e:4c:70:34:7b: 52:88:b6:3e:f0:9b:44:33:0a:4b:e4:10:44:67:59:4b:52:57: 72:f9:65:52:02:13:52:3b:31:82:f8:8c:08:94:e4:86:b3:88: 45:92:41:53:2d:ad:a3:4a:b9:84:7f:ee:af:82:60:30:40:c0: bd:50:95:b4:1f:7b:0b:78:45:22:ad:cb:c6:f8:44:fc:d5:80: 76:65:dd:70:91:e5:89:5f:63:a6:18:56:23:4e:26:50:d3:a2: 23:9b:7e:6a -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKEE4MUQxNTVDQTQwNEFFNDE0NTc4MUFGMDVFQjUzQTEy MTlFMkUwNjUwHhcNMjYwNzA5MDYzMzA4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmNDBhNC1lNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspa8N6zS8Kvqk8uariommJTtXHSl5FbblaRoSYFpwrqi2AlcY9ZFHWzRX91M pysWbxGCvRe3PES+Fwx3RbEoJk0mf8dk41cLrJXcWVIV1BMR3OztflACm8kZ5XHz xot3OhIk5B/O4AHOq4Zq1931vjCKNvaEy6+ZgruWSpw/VRNrSkAMoh7HlcqRUoKV I7MAYqVzj83RW0QsCNqZXrypsE9UJd/R12St/e46ANOq5HYQEL6nMPDMOUthvjb3 uKBuMof7CrAa911QbqFD/WoIKrTYllHgvxEpsa20uia2YyLp0IdQ0yQI1vOWZgT7 kXchVT0ISLeza+XqZSW7PMTAbQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHzrojQ3 r9MqSKeeKbn55+BRqqknMB8GA1UdIwQYMBaAFKgdFVykBK5BRXga8F61OhIZ4uBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GQ0MzMzRDQzFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJrRkZlQnJ3WHJVNkVobmk0 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMxQjcvRkNDMzM0Q0MxRTZCMTFFRkFDMEU5MTRFQzRGOUFFMDIvNDJDNkY2MDQx RTZGMTFFRjg5OEMxRTM4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN89vAMA0GCSqGSIb3DQEBCwUAA4IBAQBEE/5/AUhR6KZYgPH7 7mm3f7QDCkQ3S1KvDTB6IibW20K2gXaJN526J16dVe5uVmlGg+9c05cbdDx+Owi8 4N/mxa/lxjKi4GCgMVd+TKdFYuqVD5vwmn44ltI1Nkvu6lJ1EQEodcVr7e7jelCN ryeNPZgeGgK0gpwGPNlK8c2VThneqhMHP5iWWnBo0t3NMXInBaeBy0+vEPR3O7sk DkxwNHtSiLY+8JtEMwpL5BBEZ1lLUldy+WVSAhNSOzGC+IwIlOSGs4hFkkFTLa2j SrmEf+6vgmAwQMC9UJW0H3sLeEUircvG+ET81YB2Zd1wkeWJX2OmGFYjTiZQ06Ij m35q -----END CERTIFICATE-----Generated at Fri Jul 24 04:20:39 2026 by rpki-client